Wireshark
Wireshark
3.4.8
4.2
0.0
Wireshark free download for Mac

Wireshark for Mac3.4.8

27 August 2021

Network protocol analyzer.

What is Wireshark for Mac

Wireshark is one of the world's foremost network protocol analyzers, and is the standard in many parts of the industry. It is the continuation of a project that started in 1998. Hundreds of developers around the world have contributed to it, and it it still under active development.

Wireshark has a rich feature set which includes the following:

  • Standard three-pane packet browser
  • Multi-platform: Runs on Windows, Linux, OS X, Solaris, FreeBSD, NetBSD, and many others
  • Multi-interface: Along with a standard GUI, Wireshark includes TShark, a text-mode analyzer which is useful for remote capture, analysis, and scripting
  • The most powerful display filters in the industry
  • VoIP analysis
  • Live capture and offline analysis are supported
  • Read/write many different capture file formats: tcpdump (libpcap), NAI's Sniffer (compressed and uncompressed), Sniffer Pro, NetXray, Sun snoop and atmsnoop, Shomiti/Finisar Surveyor, AIX's iptrace, Microsoft's Network Monitor, Novell's LANalyzer, RADCOM's WAN/LAN Analyzer, HP-UX nettl, i4btrace from the ISDN4BSD project, Cisco Secure IDS iplog, the pppd log (pppdump-format), the AG Group's/WildPacket's EtherPeek/TokenPeek/AiroPeek, Visual Networks' Visual UpTime and many others
  • Capture files compressed with gzip can be decompressed on the fly
  • Hundreds of protocols are supported, with more being added all the time
  • Coloring rules can be applied to the packet list, which eases analysis

What's new in Wireshark

Version 3.4.8:
Bug Fixes
  • Dissector bug reported for Bluetooth Cycling Power Measurement characteristic for extreme angles value Issue 17505.
  • vcruntime140_1.dll deleted on Wireshark update/install Issue 17506.
  • Raknet Addresses are incorrectly identified. Issue 17509.
  • Editcap saving files as ethernet when specifying '-T ieee-802-11-*' Issue 17520.
  • CoAP dissector confuses Content-Format with Accept Issue 17536.
Try our new feature and write a detailed review about Wireshark. All reviews will be posted soon.
Write your thoughts in our old-fashioned comment
MacUpdate Comment Policy. We strongly recommend leaving comments, however comments with abusive words, bullying, personal attacks of any type will be moderated.
0.0
(0 Reviews of )
There are no reviews yet
anilmushi
anilmushi
Apr 23 2021
3.4.5
5.0
Apr 23 2021
5.0
Version: 3.4.5
The swiss army knife of packet analyzers. Incredible.
Macinman
Macinman
Jul 28 2019
3.1.0
0.0
Jul 28 2019
0.0
Version: 3.1.0
Hey guys, was curious if there is anyone here that uses Homebrew, I had upgraded to Wireshark 3.1.0 via the cask command in brew, then they released an update that put it back to version 3.0.3, which I had initially. I was just curious why? Thanks
nomorebugs
nomorebugs
Jul 25 2018
2.6.2
5.0
Jul 25 2018
5.0
Version: 2.6.2
greatest packet analysis tool ever
Virtualruffy
Virtualruffy
Jul 21 2017
2.4.0
0.0
Jul 21 2017
0.0
Version: 2.4.0
Link is wrong, goes to old version. correct 2.4 version https://2.na.dl.wireshark.org/osx/Wireshark%202.4.0%20Intel%2064.dmg
iGaucho
iGaucho
Nov 21 2015
2.0.0
0.0
Nov 21 2015
0.0
Version: 2.0.0
Finally it has a native UI and doesn't require X11/XQuartz!
hwgray
hwgray
Oct 29 2015
1.12.8
0.0
Oct 29 2015
0.0
Version: 1.12.8
Wireshark.org suggests that users of OS X try v2.0.0rc1, first. If it doesn't work for you, then try this version.
WordWeaver
WordWeaver
Mar 17 2015
1.12.4
0.0
Mar 17 2015
0.0
Version: 1.12.4
This may possibly be of help to other new WireShark users who are having trouble getting WireShark to launch in Yosemite. Some of this has been shared before, but there is a little added twist at the end which worked for me. I made repeated attempts to use both WireShark 1.12.4 and 1.99.3, but without success. Regardless of which version I used, WireShark keep freezing up during the initialization process. In the initialization window, WireShark would get as far as "Loading module preferences", or about three quarters of the way done, and in the bottom of the window it would say "Please wait while Wireshark is initializing..."; and then freeze-up. So I conducted some quick research on the web and discovered that I had to enter "sudo ln -s /opt/X11 /usr/X11" in the Terminal in order to restore a link an X11 link that Yosemite breaks. However, even that did not help. Next, I reinstalled XQuartz 2.7.7. Again, that didn't help either. Then I came across an online comment where someone stated that they typed "sudo wireshark" in the Terminal. Guess what? I don't know why, but it worked. The Terminal spit out the following, and then WireShark launched on my desktop: void QCocoaMenu::insertNative(QCocoaMenuItem *, QCocoaMenuItem *) Menu item is already in a menu, remove it from the other menu first before inserting void QCocoaMenu::insertNative(QCocoaMenuItem *, QCocoaMenuItem *) Menu item is already in a menu, remove it from the other menu first before inserting void QCocoaMenu::insertNative(QCocoaMenuItem *, QCocoaMenuItem *) Menu item is already in a menu, remove it from the other menu first before inserting void QCocoaMenu::insertNative(QCocoaMenuItem *, QCocoaMenuItem *) Menu item is already in a menu, remove it from the other menu first before inserting 22:01:58 Dbg plugin_dir: /Applications/Wireshark.app/Contents/PlugIns/wireshark Now I can click WireShark's icon in the Dock, and it appears to be working fine.
Chocky
Chocky
Feb 14 2015
1.12.3
5.0
Feb 14 2015
5.0
Version: 1.12.3
Wireshark on Yosemite To get Wireshark working on Yosemite you will need to install X11 which may be found at: http://xquartz.macosforge.org/landing/ and then make the following link: $ sudo ln -s /opt/X11 /usr/X11
Jpinoniemi
Jpinoniemi
Jan 8 2015
1.12.1
5.0
Jan 8 2015
5.0
Version: 1.12.1
Wireshark 1.12.3 was released on 1-7-15
Holgorio
Holgorio
Sep 17 2014
1.12.0
4.0
Sep 17 2014
4.0
Version: 1.12.0
Wireshark 1.12.1 is available fixing several security issues with DoS vulnerabilities in some of their parsers or dissectors. Enjoy.
David-Morrison
David-Morrison
Apr 1 2013
1.8.6
0.0
Apr 1 2013
0.0
Version: 1.8.6
Just for the record, when you start WireShark (1.9.2) in Mountain Lion, it offers to install an X11 system. If you say yes, it takes you to an Apple Support page which contains a link to the XQuartz project. You have to download and install it. Note that it gets installed in the Utilities folder inside the Applications folder. When you start WireShark, it asks you to find X11. Navigate to Utilities folder and select XQuartz. WireShark now freezes for a couple of minutes while it builds font caches - DON'T PANIC! Then the window appears.
Nicolasd
Nicolasd
Jun 17 2012
1.6.7
0.0
Jun 17 2012
0.0
Version: 1.6.7
Beware. Apple is REMOVING X11 in Mac OS X 10.8 Mountain Lion. Not an optional install. It's *GONE*! In a few months, Wireshark will be unusable on up-to-date Macs.
anonymous-dingo-5566
anonymous-dingo-5566
May 31 2012
1.6.7
0.0
May 31 2012
0.0
Version: 1.6.7
I just downloaded it for a networking class. On their site the version is 1.6.8, here it's 1.6.7. Please update as I depend on Macupdate for the most recent versions. Thanks
Anon42
Anon42
Mar 29 2012
1.6.6
0.5
Mar 29 2012
0.5
Version: 1.6.6
No longer supports 10.6.5 :-(
frequencydip
frequencydip
Nov 5 2011
1.6.3
4.5
Nov 5 2011
4.5
Version: 1.6.3
This program has been very useful in troubleshooting tracking and analytics. Using the GA debugger only helps for chrome, using this we can see the call any browser makes or even a connected iPad or iPhone!
JohnKHeath
JohnKHeath
Oct 22 2011
1.6.2
4.5
Oct 22 2011
4.5
Version: 1.6.2
After trying for a hundred times, I still have problems installing this program. Any workaround for Lion, or is it not supported?
JohnKHeath
JohnKHeath
Oct 5 2011
1.6.2
4.5
Oct 5 2011
4.5
Version: 1.6.2
I used to run WireShark in windows, now this version has even better functionalities in Mac. Works great, I like it.
angelowales79
angelowales79
Sep 30 2011
1.6.2
4.5
Sep 30 2011
4.5
Version: 1.6.2
Gotta love wireshark
anonymous-aardvark-5710
anonymous-aardvark-5710
Jun 8 2011
1.6.0rc2
5.0
Jun 8 2011
5.0
Version: 1.6.0rc2
Great tool for snooping ethernet traffic. Windows 64bit variant is a bit cumbersome on 2008 server with IPv6, but on the whole a great improvement.
SickTeddyBear
SickTeddyBear
Mar 30 2011
1.5.0
0.0
Mar 30 2011
0.0
Version: 1.5.0
Note that, 1.5.0 is a development/beta release. The current stable release is 1.4.4. Check the developer's web site for more info.
Borlox
Borlox
Jun 3 2010
1.2.8
0.0
Jun 3 2010
0.0
Version: 1.2.8
The right way to get this to work is NOT to run it as root or to screw around with the permissions of /dev/bpf*. Set the permissions of the dumpcap executable to something like root:wheel rwsr--r-- (NOT rwsr-xr-x), and add an ACL entry for each user who needs to run Wireshark. For example, to enable user foo to capture packets, sudo chmod +a "foo allow execute" $( which dumpcap )
Chap-Harrison
Chap-Harrison
Feb 13 2010
1.2.6
0.0
Feb 13 2010
0.0
Version: 1.2.6
Starts up but can't find any interfaces. Not surprised since it's never tried to authenticate. I then ran Command Line tool 'sudo wireshark' which worked but gave me glaring warning about running as root. So what do people do to run wireshark on mac os x?
Mutant
Mutant
Feb 12 2010
1.2.5
0.0
Feb 12 2010
0.0
Version: 1.2.5
As of 2010/02/12 the MU download link is broken. Current download is: http://www.wireshark.org/download.html
Trashie
Trashie
Sep 17 2009
1.2.2
0.0
Sep 17 2009
0.0
Version: 1.2.2
X11 thing is a bit of a pain for OSX as X11 never works as nice on OSX as Linux. Can't tunnel some X11 stuff on OSX at all. Of course X11 has it's benefits even on OSX and I can see why they keep it this way. This is more for people trying to check network security and administrate networks than anything else so I can't see it being that popular mainstream anyway X11 or not. Most of us who use it know about X11 and Linux/Unix anyway and probably should/do have it on a Linux box anyway but we love OSX so we try to put it here too. The lack of comments for this tells you mostly it is run on Linux and Win not OSX. I can't find an app as good native to OSX but maybe there is one? But it is a wonderful project and application that really helps secure/admin networks.
Alcimedes
Alcimedes
May 17 2007
0.1
4.0
May 17 2007
4.0
Version: 0.1
I downloaded WireShark today and must say that after the initial run through I'm very impressed. Obviously a Win/Unix port based on appearance, but it can do what I've had a hard time finding any other free Mac app. capable of doing. It's keeps detailed logs of all network traffic and displays them in a handy GUI interface. If anyone is interested in where their traffic is going you should give this app. a shot. I only took off points because the appearance is obviously not Mac standard which some people won't like, and quitting the app. required a force quit. Considering what it brings to the table they are minor complaints though.
Free
4.2
0.0
App requirements: 
  • Intel 64
  • macOS 10.12.0 or later
License: 
FreeAbsolutely Free

Downloaded & Installed 183,968 times

How would you rate Wireshark?
Similar apps
Debookee
Analyze the information being sent over your network.
Is this app is similar to Debookee? Vote to improve the quality of this list.
Vote results
0
Upvotes
3
Total score
0
Downvotes
Cocoa Packet Analyzer
Network packet protocol analyzer.
Is this app is similar to Cocoa Packet Analyzer? Vote to improve the quality of this list.
Vote results
2
Upvotes
2
Total score
0
Downvotes
Charles
Java HTTP proxy and monitor.
Is this app is similar to Charles? Vote to improve the quality of this list.
Vote results
0
Upvotes
1
Total score
0
Downvotes
Burp Suite
Platform for performing security testing of web applications.
Is this app is similar to Burp Suite? Vote to improve the quality of this list.
Vote results
0
Upvotes
1
Total score
0
Downvotes
WiFi Scanner
Wireless scanner and connection manager.
Is this app is similar to WiFi Scanner? Vote to improve the quality of this list.
Vote results
0
Upvotes
1
Total score
0
Downvotes